More and more attacks taking advantage of a XSS and RCE bug in the popular plugin have cropped up in the wild.
Link: https://threatpost.com/exploits-social-warfare-wordpress/144051/
Tag: Hacks
FBI: BEC Scam Losses Almost Double To Reach $1.2 Billion
Overall, in 2018 the FBI received more than 351k reported scams with losses exceeding $2.7 billion.
Link: https://threatpost.com/fbi-bec-scam-losses-double/144038/
France’s ‘Secure’ Telegram Replacement Hacked in an Hour
The messaging app that will replace the government’s use of WhatsApp and Telegram was released last week, with security vulnerability included.
Link: https://threatpost.com/frances-secure-telegram-messaging-hacked/144010/
WannaCry Hero Pleads Guilty to Kronos Malware Charges
The malware researcher has pleaded guilty to two out of 10 charges; one with creating the Kronos malware and the other with conspiracy.
Link: https://threatpost.com/wannacry-hero-pleads-guilty-to-kronos-malware-charges/143997/
Microsoft’s Latest Patch Hoses Some Antivirus Software
McAfee, Sophos and Avast are among the antivirus software suites impacted.
Link: https://threatpost.com/microsofts-latest-patch-hoses-some-antivirus-software/143978/
Weather Channel Knocked Off-Air in Dangerous Precedent
The incident was the work of malicious cyberattackers.
Link: https://threatpost.com/weather-channel-off-air-hack/143936/
Ubiquitous Bug Allows HIPAA-Protected Malware to Hide Behind Medical Images
The ubiquitous nature of the flaw opens the door for rapidly spreading, crippling cyberattacks.
Link: https://threatpost.com/hipaa-protected-malware-medical-images/143890/
State-Sponsored DNS Hijacking Infiltrates 40 Firms Globally
An ongoing campaign, active since 2017, has been stealing credentials via global DNS hijacking attacks.
Link: https://threatpost.com/dns-hijacking-campaign-40-firms-globally/143870/
Wipro Confirms Hack and Supply Chain Attacks on Customers
The IT giant’s networks were infiltrated and used to mount supply-chain attacks on its enterprise customers.
Yahoo Offers $117.5M Settlement in Data Breach Lawsuit
Yahoo is taking a second stab at settling a massive lawsuit regarding the data breaches that the Internet company faced between 2013 and 2016.
Link: https://threatpost.com/yahoo-offers-117-5m-settlement-in-data-breach-lawsuit/143671/